a1-editor-in-chief

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/chief-spine.md, the runtime resolves sources from “current user instructions and current task materials” and then delegates the selected supplied text to a1-copy-editing, meaning outsider-authored free text supplied by the invoker is read/ingested at runtime.